diff options
| author | nectar <nectar@FreeBSD.org> | 2005-06-04 03:18:39 +0800 |
|---|---|---|
| committer | nectar <nectar@FreeBSD.org> | 2005-06-04 03:18:39 +0800 |
| commit | 6377fcd192ce225be3833282f99a6e4c5b2ed07e (patch) | |
| tree | 246ad008fa62981c87bcff5be00b4760f472036f /security/vuxml | |
| parent | 46c47ddd1149a4b5078b9f4993eda144fd47d1d6 (diff) | |
| download | freebsd-ports-gnome-6377fcd192ce225be3833282f99a6e4c5b2ed07e.tar.gz freebsd-ports-gnome-6377fcd192ce225be3833282f99a6e4c5b2ed07e.tar.zst freebsd-ports-gnome-6377fcd192ce225be3833282f99a6e4c5b2ed07e.zip | |
Document squid denial-of-service vulnerabilities.
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 723324807d27..488f88e15c08 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,35 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="5bf1a715-cc57-440f-b0a5-6406961c54a7"> + <topic>squid -- denial-of-service vulnerabilities</topic> + <affects> + <package> + <name>squid</name> + <range><lt>2.5.9</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Squid team reported several denial-of-service + vulnerabilities related to the handling of DNS responses and + NT Lan Manager messages. These may allow an attacker to crash + the Squid cache.</p> + </body> + </description> + <references> + <cvename>CAN-2005-0446</cvename> + <url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert</url> + <cvename>CAN-2005-0096</cvename> + <cvename>CAN-2005-0097</cvename> + <url>http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth</url> + </references> + <dates> + <discovery>2005-01-16</discovery> + <entry>2005-06-03</entry> + </dates> + </vuln> + <vuln vid="3b260179-e464-460d-bf9f-d5cda6204020"> <topic>racoon -- remote denial-of-service</topic> <affects> |